CyberRota Analysis
AI-GeneratedOpenSSL versions prior to 1.11.1 are vulnerable to a pre-authentication integer underflow in the ssh2_cipher_crypt() function, which can be exploited by a malicious SSH server to crash any connecting client during the cipher negotiation phase. This vulnerability allows attackers to trigger an out-of-bounds read, leading to a process crash before authentication takes place. Organizations using affected versions of OpenSSL should prioritize patching to mitigate potential disruptions to their SSH services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
libssh2 through 1.11.1, fixed in commit a2ed82d, contains a pre-authentication integer underflow vulnerability in the ssh2_cipher_crypt() function in src/openssl.c that allows a malicious SSH server to crash any connecting client by negotiating AES-GCM ciphers during handshake. Attackers can exploit the underflow in the expression computing blocksize minus aadlen minus authentication tag length to trigger an out-of-bounds read and a memcpy call with a near-SIZE_MAX length argument, causing immediate process crash before any authentication occurs.
Related CVEs
Other vulnerabilities affecting the same vendor(s)